Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS218869.roa
File:                     AS218869.roa (raw, json)
Hash identifier:          UYukCDnnrTZ/QIyYduxL/zgt/x7RjwORh1YA05gEHew=
Subject key identifier:   CF:95:A2:16:9C:57:5A:23:A3:E4:4E:07:5B:AD:E1:82:FD:6C:6F:E9
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       0BC603DC7432EAF14CB393FB9CEDB395BEA7D978
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS218869.roa
Signing time:             Thu 10 Sep 2026 08:49:22 +0000
ROA not before:           Thu 10 Sep 2026 08:44:22 +0000
ROA not after:            Thu 09 Sep 2027 08:49:22 +0000
asID:                     218869
IP address blocks:        164.37.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 10:19:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:c6:03:dc:74:32:ea:f1:4c:b3:93:fb:9c:ed:b3:95:be:a7:d9:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Sep 10 08:44:22 2026 GMT
            Not After : Sep  9 08:49:22 2027 GMT
        Subject: CN=CF95A2169C575A23A3E44E075BADE182FD6C6FE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8c:18:15:a0:cb:b9:b9:84:c7:94:e4:a4:5e:
                    3c:19:c3:cf:24:47:ea:e3:6a:5c:3d:0a:60:33:a8:
                    00:a5:fc:6c:8d:58:12:91:4f:7d:8c:d2:df:5c:8e:
                    85:c1:53:6f:d1:e9:bc:48:cb:a7:23:52:99:aa:73:
                    4d:22:0f:e3:e2:40:16:f4:de:ab:85:a2:1b:0d:c4:
                    24:66:ef:27:b9:5d:f4:f2:69:d8:7f:5b:48:a2:3c:
                    d1:b3:ce:1d:13:3d:4b:27:15:73:6d:68:61:08:07:
                    f0:36:40:78:45:e6:c2:73:f3:16:0d:88:6a:8e:3c:
                    ba:7e:92:f0:c9:a5:20:1c:77:9f:30:99:91:68:d3:
                    27:1e:73:9f:3f:56:6c:23:b1:20:39:40:63:41:27:
                    96:b7:72:ec:ae:d6:33:3d:f7:b3:45:ab:12:22:dd:
                    16:a2:0e:e4:7e:21:2a:c3:17:83:34:1d:a0:73:a2:
                    3b:fe:75:fc:4b:28:25:22:7b:11:24:7e:c0:8c:43:
                    a7:34:79:a0:4b:6f:20:fe:b9:65:94:b6:97:95:36:
                    30:ca:5a:66:18:43:1f:d3:72:91:7c:fc:65:06:43:
                    40:d9:1c:6d:4a:9c:fb:a3:c9:40:ef:04:10:22:47:
                    c3:a2:81:60:44:c4:8a:e9:16:4d:c1:17:29:4e:b8:
                    0d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:95:A2:16:9C:57:5A:23:A3:E4:4E:07:5B:AD:E1:82:FD:6C:6F:E9
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS218869.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.37.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:63:82:2b:2e:cf:ee:3d:4f:fd:3a:ca:35:a7:a3:fe:3c:49:
         bf:a1:ef:65:9b:2f:5f:7d:46:50:83:36:6a:24:e8:1f:94:13:
         6b:6f:3c:8b:78:46:be:91:1f:b2:50:da:e6:92:44:e9:9d:c8:
         92:84:d9:6b:f9:c3:c2:c2:9c:0b:1c:15:01:46:02:fb:fd:cf:
         45:a3:de:9c:07:e7:1a:0b:94:27:9d:0a:5c:ae:93:dc:1c:b8:
         8d:92:ac:55:74:58:9c:2c:f1:40:23:ab:24:54:7b:af:33:ab:
         a7:e4:95:31:32:32:c8:30:cc:bb:b2:ff:9d:9d:05:62:9e:8e:
         f5:0c:8f:12:cd:b7:9d:1e:ca:11:2a:86:58:dc:1a:01:85:fa:
         d2:1b:30:d4:39:4e:a6:1c:6a:85:ab:11:9c:9c:8c:ae:36:ac:
         ec:42:a9:90:67:30:45:2a:6c:5b:19:40:0c:64:23:f1:4d:ee:
         c8:46:da:f3:ac:67:6b:b6:b1:ca:4e:99:a4:d3:7e:ad:cf:6e:
         69:43:ad:8c:e6:4a:55:3d:4c:2d:b7:48:99:d9:3d:d0:94:eb:
         e2:6d:20:f6:17:c7:a1:12:ac:9d:95:94:c1:24:e8:0b:9b:db:
         fb:27:9d:55:c2:7c:10:d5:7a:b3:b9:4b:44:59:6a:9a:12:b5:
         27:fc:c8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:52:45 2026 by rpki-client